Common questions about Certificate Monitoring answered.
Monitors any SSL/TLS certificate accessible over the network. Includes certificates from all major Certificate Authorities (Let's Encrypt, DigiCert, Comodo, GlobalSign, etc.), self-signed certificates, wildcard certificates, and multi-domain SAN certificates. Supports monitoring on any port: web servers (443), mail servers (465, 993, 995), and custom applications.
Sends alerts at configurable intervals before expiration. By default, alerts at 30, 14, and 7 days before expiration, but thresholds are customizable. Alerts include certificate details, expiration date, and recommended actions. Available via email, Slack, SMS, webhooks, and many other channels depending on plan.
Yes. Validates complete certificate chains from leaf certificate through intermediates to root CA. Expired or missing intermediate certificates cause the same browser warnings as expired leaf certificates. Alerts if there are any issues with certificate chains.
Yes. Deploy on-premise monitoring agents within the network to track internal certificates, private CA infrastructure, and self-signed certificates. Agents run as lightweight Docker containers and check certificates without exposing internal networks. Learn about private network monitoring
Tracks certificate details including: issuer and subject information, validity period (not before/not after dates), Subject Alternative Names (SANs), key type and size, signature algorithm, serial number, certificate chain, and any protocol/configuration issues. Historical data shows when certificates were renewed or changed.
Yes. Monitors certificates on any port. Common examples include: HTTPS on 8443, SMTPS on 465, IMAPS on 993, POP3S on 995, LDAPS on 636, and custom application ports. Specify the port when adding a domain.
Fully supports Let's Encrypt certificates. Since Let's Encrypt certificates have a 90-day validity period (shorter than traditional certificates), monitoring is especially important. Recommended alert thresholds: 30, 14, and 7 days to ensure automated renewal processes work correctly.
Yes. The API integrates certificate monitoring into deployment pipelines. Verify certificates are valid after deployments, add new domains automatically when deploying new services, and receive webhook notifications that trigger automated responses. Includes a GitHub Action for easy integration with GitHub workflows.
Our support team is ready to help.